// SCAN REPORT

FortiManager MCP Server

106 tools. 57 can modify or destroy data without limits.

12 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

57 can modify or destroy data

49 read-only

106 tools total

Community server · catalogue entry verified 29/06/2026

How to control FortiManager MCP Server ↓

TOOL MAP

What FortiManager MCP Server exposes to your agents

Read (49) Write / Execute (45) Destructive / Financial (12)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous FortiManager MCP Server tools

Destructive · High delete_address The tool name 'delete_address' clearly indicates a deletion operation. Destructive · High delete_address_group Deletion of address groups in a centralized firewall policy management system cannot be undone and will immediately affect firewall rules that reference the deleted group. Destructive · High delete_cli_template_group This tool performs an irreversible deletion of a CLI template group, which is a core network configuration artifact managed by FortiManager. Destructive · High delete_device Device deletion cannot be undone and removes managed infrastructure from the centralized system.

57 of FortiManager MCP Server's 106 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control FortiManager MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and FortiManager MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_address": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_device": {
    "limits": [
      {
        "counter": "add_device_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "find_fortimanager_tool": {
    "limits": [
      {
        "counter": "find_fortimanager_tool_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register FortiManager MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON FORTIMANAGER →

Instant setup, no code required.

FULL CATALOGUE

All 106 FortiManager MCP Server tools

DESTRUCTIVE 12 tools

Destructive delete_address delete_address Destructive delete_address_group delete_address_group Destructive delete_cli_template_group Delete a CLI template group. Destructive delete_device delete_device Destructive delete_devices_bulk delete_devices_bulk Destructive delete_firewall_policies_bulk delete_firewall_policies_bulk Destructive delete_firewall_policy delete_firewall_policy Destructive delete_package delete_package Destructive delete_script Delete a CLI script. Destructive delete_sdwan_template Delete an SD-WAN template. Destructive delete_service delete_service Destructive delete_service_group delete_service_group

EXECUTE 12 tools

Execute commit_adom commit_adom Execute create_script create_script Execute execute_fortimanager_tool Execute a FortiManager tool by name with parameters. Execute execute_script_on_device execute_script_on_device Execute execute_script_on_device_group Execute a CLI script on a device group. Execute execute_script_on_devices Execute a CLI script on multiple devices. Execute execute_script_on_package execute_script_on_package Execute install_device_settings install_device_settings Execute install_package install_package Execute preview_install preview_install Execute validate_template validate_template Execute wait_for_task wait_for_task

WRITE 33 tools

Write add_device add_device Write add_devices_bulk add_devices_bulk Write add_model_device add_model_device Write assign_package assign_package Write assign_sdwan_template Assign an SD-WAN template to a device. Write assign_sdwan_template_bulk Assign an SD-WAN template to multiple devices. Write assign_system_template Assign a system template to a device. Write assign_system_template_bulk Assign a system template to multiple devices. Write assign_template_group Assign a template group to a device. Write clone_package clone_package Write create_address_fqdn create_address_fqdn Write create_address_group create_address_group Write create_address_host create_address_host Write create_address_range create_address_range Write create_address_subnet create_address_subnet Write create_cli_template_group Create a new CLI template group. Write create_firewall_policy create_firewall_policy Write create_package create_package Write create_sdwan_template Create a new SD-WAN template. Write create_service_group create_service_group Write create_service_icmp create_service_icmp Write create_service_tcp_udp create_service_tcp_udp Write lock_adom lock_adom Write move_firewall_policy move_firewall_policy Write unassign_sdwan_template Unassign an SD-WAN template from a device. Write unassign_system_template Unassign a system template from a device. Write unlock_adom unlock_adom Write update_address update_address Write update_address_group update_address_group Write update_device update_device Write update_firewall_policy update_firewall_policy Write update_script Update an existing CLI script. Write update_service update_service

READ 49 tools

Read find_fortimanager_tool Discover FortiManager tools by operation name/keywords. Read get_address get_address Read get_address_group get_address_group Read get_adom get_adom Read get_cli_template_group Get details of a CLI template group. Read get_device get_device Read get_device_interfaces get_device_interfaces Read get_device_realtime_status get_device_realtime_status Read get_device_status get_device_status Read get_firewall_policy get_firewall_policy Read get_ha_status get_ha_status Read get_package get_package Read get_policy_services get_policy_services Read get_preview_result get_preview_result Read get_script Get details of a specific CLI script. Read get_script_log_latest Get the latest script execution log. Read get_script_log_output get_script_log_output Read get_script_log_summary Get script execution log summary. Read get_sdwan_template Get details of a specific SD-WAN template. Read get_service get_service Read get_service_group get_service_group Read get_system_status get_system_status Read get_system_template Get details of a specific system template. Read get_task get_task Read get_template Get details of a specific provisioning template. Read get_template_group Get details of a template group. Read health_check Check FortiManager MCP server health and connection status. Read list_address_groups list_address_groups Read list_addresses list_addresses Read list_adoms list_adoms Read list_cli_template_groups List CLI template groups in an ADOM. Read list_device_groups list_device_groups Read list_device_vdoms list_device_vdoms Read list_devices list_devices Read list_firewall_policies list_firewall_policies Read list_fortimanager_categories List all FortiManager tool categories and their tool counts. Read list_packages list_packages Read list_scripts list_scripts Read list_sdwan_templates list_sdwan_templates Read list_service_groups list_service_groups Read list_services list_services Read list_system_templates list_system_templates Read list_tasks list_tasks Read list_template_groups list_template_groups Read list_templates list_templates Read reload_device_list reload_device_list Read search_devices search_devices Read search_firewall_policies search_firewall_policies Read search_objects search_objects

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about FortiManager MCP Server

Can an AI agent delete data through the FortiManager MCP Server MCP server? +

Yes. The FortiManager MCP Server server exposes 12 destructive tools including delete_address, delete_address_group, delete_cli_template_group. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through FortiManager MCP Server? +

The FortiManager MCP Server server has 33 write tools including add_device, add_devices_bulk, add_model_device. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach FortiManager MCP Server.

How many tools does the FortiManager MCP Server MCP server expose? +

106 tools across 4 categories: Destructive, Execute, Read, Write. 49 are read-only. 57 can modify, create, or delete data.

How do I enforce a policy on FortiManager MCP Server? +

Register the FortiManager MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every FortiManager MCP Server tool call.

Deterministic rules across all 106 FortiManager MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON FORTIMANAGER →

Instant setup, no code required.

106 FortiManager MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.